3031
The Fake Cisco
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
3032
Distributed Authorization
Using local data to answer authorization questions with Oso Cloud
3033
Trying to Keep the Internet Safe from Warrantless NSA Surveillance
Next month, President-elect Trump will be handed the keys to the NSA’s vast spying apparatus. As a candidate, he supported mass surveillance of Americans’ phone calls, called for expanded spying on American Muslims, and even invited Russia to hack the emails of his political opponent. With these threats to privacy and…
3034
Hardening attack surfaces with formally proven binary format parsers
With an eye toward performance, interoperability, or legacy concerns, low-level system software often must parse binary encoded data formats. Few tools are available for this task, especially since the formats involve a mixture of arithmetic and data dependence, beyond what can be handled by typical parser generators…
3035
Understanding Email Encryption (2025)
A comprehensive overview of how email is encrypted, the benefits, and the trade-offs.
3036
The State of SSL Stacks
The SSL landscape has shifted dramatically. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.
3037
EFF to Court: The First Amendment Protects the Right to Record First Responders
The First Amendment protects the right of members of the public to record first responders addressing medical emergencies, EFF argued in an amicus brief filed in the federal trial court for the Northern District of Texas. The case, Adelman v. DART, concerns the arrest of a Dallas freelance press...
3038
Searching statically-linked vulnerable library functions in executable code
Helping researchers find 0ld daysPosted by Thomas Dullien, Project ZeroExecutive summarySoftware ...
3039
Operation Triangulation: iOS devices targeted with previously unknown malware
While monitoring the traffic of our own corporate Wi-Fi network, we noticed suspicious activity that originated from several iOS-based phones. Since it is impossible to inspect modern iOS devices from the inside, we created offline backups of the devices, inspected them and discovered traces of compromise.
3040
3041
Securitybot: Open Sourcing Automated Security at Scale
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
3042
3043
3044
Auditing Rust Crypto: The First Hours
The Latest News from Research at Kudelski Security
3045
New Adobe Flash 0day, have a nice weekend
For the complete experience, please enable JavaScript in your browser. Thank you!
3046
3047
3048
Duqu 2.0 Hits Kaspersky Lab
Kaspersky Lab uncovers Duqu 2.0 – a highly sophisticated malware platform exploiting up to three zero-day vulnerabilities.
3049
Sleeper Shells: Attackers Are Planting Dormant Backdoors in Ivanti EPMM
A February 2026 campaign used a internal JSP path and in-memory Java class loaders to quietly seed persistent access across Ivanti EPMM deployments - then walked away. We break down the tradecraft.
3050
Building a Titan: Better security through a tiny chip
At the Made by Google event last week, we talked about the combination of AI + Software + Hardware to help organize your information. To better protect that information at a hardware level, our new Pixel 3 and Pixel 3 XL devices include a Titan M chip.We briefly introduced Titan M and some of its benefits on our…
3051
Americans Disapprove of Government Surveillance Programs
More Americans disapprove (53%) than approve (37%) of the government program that obtained telephone call logs and Internet communication records. Americans are split on whether leaker Edward Snowden did the right or wrong thing.
3052
Cloudflare to acquire Area 1 Security for $162M
Earlier today we announced that Cloudflare has agreed to acquire Area 1 Security
3053
Approaching Access Control on the Web (Part I)
Learn how to build future-proof, state of the art login, access control and API security systems in this multipart series.
3054
Your Wireless Router Is Broken – Help Us Fix It At DEF CON
As part of our Open Wireless Movement, we set out to create router software that would make it easier for people to safely and smartly share part of their wireless network. Protecting hosts, so their security is not compromised because they offer open networks, is one of the goals of the router...
3055
Portugal proposed law tries to sneak in biometric mass surveillance
Whilst the European Parliament has been fighting bravely for the rights of everyone in the EU to exist freely and with dignity in publicly accessible spaces, the government of Portugal is attempting to push their country in the opposite direction: one of digital authoritarianism. The Portuguese lead organisation in…
3056
Human Rights Watch Sues DEA Over Bulk Collection of Americans’ Telephone Records
Los Angeles — Human Rights Watch, a nonpartisan organization that fights human rights abuses across the globe, filed suit against the U.S. Drug Enforcement Administration late Tuesday for illegally collecting records of its telephone calls to certain foreign countries as part of yet another...
3057
3058
Mission Improbable: Hardening Android for Security and Privacy
Updates: See the Changes section for a list of changes since initial posting. After a long wait,...
3059
Racing against the clock – hitting a tiny kernel race window
TL;DR: How to make a tiny kernel race window really large even on kernels without CONFIG_PREEMPT...
3060
Session is shutting down in 90 days
The Session Technology Foundation cannot continue without your support. Donate today to help Session in its fight for survival.